$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: uku+9qNsf2bRo1DMVvXMSLqh9Bq6YbsjfS9gS5iUpVU= Subject key identifier: 45:DA:1D:C1:DA:F8:33:24:5F:78:E0:A5:AC:9F:99:B5:3D:59:41:E0 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0AEA Signing time: Sat 02 Aug 2025 19:44:07 +0000 Manifest this update: Sat 02 Aug 2025 19:44:06 +0000 Manifest next update: Sat 09 Aug 2025 19:44:06 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: T46HnMNajegXZISVL4Zy4ladKHKJp2Bb6HsaQl2sMVo=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: b6XLk77YmW0zXiOErVi5OmWJQw5FWv6IwcAZrV/V3KA=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: GniYTYc+rkB55fqBkTbtJuPpFjVN9/DglrpXWuCGSdc=) 4: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: DBysmfWMy9lYVGepCi0Ma5VGyIIRzRfP58+h2cMR+Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Aug 2 19:44:06 2025 GMT Not After : Aug 9 19:44:06 2025 GMT Subject: CN=688e6a86-ccc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:96:d6:1f:f1:bf:67:80:2e:02:da:fc:ba: 3d:f0:6a:d8:fe:5b:f2:45:81:d9:52:ad:01:0f:ed: 70:df:3e:1c:2d:15:e3:e2:69:a2:ef:01:59:c3:be: 96:b6:19:6c:7b:92:c1:60:f2:ed:3b:0d:01:03:e0: 16:7a:41:c8:81:3d:00:e5:6d:ef:be:e9:ab:00:bc: 21:78:da:5f:12:d3:03:ea:c6:8e:ed:28:38:e3:73: 3a:49:fd:a6:79:83:56:fc:7b:73:47:97:7b:6f:b3: 22:4a:f0:76:e2:c1:36:84:27:af:03:52:0e:65:d6: 8f:af:47:b6:09:09:38:2c:2a:14:a2:05:c6:c1:ee: af:b0:df:da:47:82:45:67:1d:78:16:49:b8:5f:b9: 1e:81:5a:63:e1:13:9c:01:13:31:c2:47:fd:a6:bd: f0:02:75:ee:b4:4b:e8:44:72:90:eb:91:d8:5e:e5: ea:ed:13:a9:83:44:7d:bd:f8:cd:3f:06:9e:78:32: 40:a1:6c:e4:a9:15:f1:29:ab:73:64:b7:d9:73:cd: 2c:f9:e6:68:e0:33:1d:40:f7:07:61:4a:1c:dd:d9: 63:5e:69:63:30:d6:96:2b:25:96:1a:cc:ad:65:e3: 27:2b:6b:38:86:e9:cb:d3:bd:f5:2f:41:b8:9d:1d: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DA:1D:C1:DA:F8:33:24:5F:78:E0:A5:AC:9F:99:B5:3D:59:41:E0 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:08:40:0c:93:9e:1b:95:b1:5f:ba:f5:80:eb:58:4d:eb:67: 7b:9d:f6:50:25:1f:3d:e0:c9:4b:a8:fd:71:54:fd:a4:be:c0: 0d:f3:7d:30:2c:68:5b:48:f0:ed:e1:b9:d0:86:44:12:77:3f: 66:be:11:40:00:e3:27:82:d0:72:58:8b:52:75:73:4a:03:c3: 5b:04:03:48:00:fb:fb:1e:4f:34:cb:69:50:c7:49:44:49:15: 71:88:04:e7:0b:02:b7:67:6c:ae:84:a7:62:73:57:22:e7:b5: 17:61:06:d2:97:cb:f8:5d:ff:17:6c:d0:d1:46:e2:2b:a5:b0: 80:e6:33:a8:32:e0:c3:e6:0d:19:a3:e9:1e:98:64:01:d5:7b: a9:a0:c2:ad:97:de:01:2c:e8:5c:c8:16:37:d0:f8:84:77:e1: d6:5e:e9:45:67:0e:06:55:2a:e9:5b:f4:fe:2a:65:8b:3c:7b: 79:c5:b1:c9:64:c4:c3:62:d0:18:86:6b:6d:7c:16:11:c0:28: b3:33:d4:c8:24:5e:fd:41:e2:5b:f1:6c:06:72:c2:d0:52:95: 39:09:7d:0f:67:37:a0:28:29:69:8c:d8:36:32:26:e0:57:2f: f6:62:f5:cb:b2:a9:a2:70:7b:25:db:65:86:da:44:15:e0:61: 0f:79:f3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjUwODAyMTk0NDA2WhcNMjUwODA5MTk0NDA2WjAYMRYwFAYD VQQDEw02ODhlNmE4Ni1jY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcyW1h/xv2eALgLa/Lo98GrY/lvyRYHZUq0BD+1w3z4cLRXj4mmi7wFZw76W thlse5LBYPLtOw0BA+AWekHIgT0A5W3vvumrALwheNpfEtMD6saO7Sg443M6Sf2m eYNW/HtzR5d7b7MiSvB24sE2hCevA1IOZdaPr0e2CQk4LCoUogXGwe6vsN/aR4JF Zx14Fkm4X7kegVpj4ROcARMxwkf9pr3wAnXutEvoRHKQ65HYXuXq7ROpg0R9vfjN PwaeeDJAoWzkqRXxKatzZLfZc80s+eZo4DMdQPcHYUoc3dljXmljMNaWKyWWGsyt ZeMnK2s4hunL0731L0G4nR1HJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXaHcHa +DMkX3jgpayfmbU9WUHgMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxCEAMk54blbFfuvWA61hN62d7nfZQJR894MlLqP1xVP2kvsAN830w LGhbSPDt4bnQhkQSdz9mvhFAAOMngtByWItSdXNKA8NbBANIAPv7Hk80y2lQx0lE SRVxiATnCwK3Z2yuhKdic1ci57UXYQbSl8v4Xf8XbNDRRuIrpbCA5jOoMuDD5g0Z o+kemGQB1XupoMKtl94BLOhcyBY30PiEd+HWXulFZw4GVSrpW/T+KmWLPHt5xbHJ ZMTDYtAYhmttfBYRwCizM9TIJF79QeJb8WwGcsLQUpU5CX0PZzegKClpjNg2Mibg Vy/2YvXLsqmicHsl22WG2kQV4GEPefPo -----END CERTIFICATE-----Generated at Mon Aug 4 04:07:51 2025 by rpki-client